#1Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
Kitploit recommended
monkeysec-sys/kangarooAuthentication bypass exploit for CVE-2026-32746 targeting legacy Telnet servers, with defensive guidance and Go-based implementation for authorized…
sam00/poc-cve-2026-56164-exploitCVE-2026-56164 is a critical missing-authentication vulnerability affecting on-premises Microsoft SharePoint Server. It allows unauthenticated,…
sysirq/fortios-auth-bypass-exploit-cve-2024-55591Python exploit for CVE-2024-55591, bypassing FortiOS authentication to execute remote commands on vulnerable FortiGate and FortiProxy devices.
baph00met/cve-2024-47533CVE-2024-47533: Cobbler Authentication Bypass & Code Execution
roccoammon/active-directory-health-checkPowerShell GUI tool that runs 54 best-practice health and security checks against Active Directory, flagging Kerberoasting, DCSync, delegation and…
ainrm/jrohy-trojan-unauth-pocCVE-2024-55215
0xgh057r3c0n/cve-2025-31161🛡️ CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit
7h30th3r0n3/cve-2026-53625-glpi-pocGLPI Privilege Escalation via authtype Manipulation PoC - CVE-2026-53625. Ethical PoC for the GLPI vulnerability allowing a Technician to take full…
xtwip/fortipwnForti CVE-2022-40684 enumeration script built in Rust
t3tra-dev/cve-2025-29927-demoNext.js における認可バイパスの脆弱性 CVE-2025-29927 を再現するデモです。
isaca0315/cve-2026-65013-bola-idorReproducible BOLA/IDOR PoC against Onlook's tRPC API (CVE-2026-65013), with a 12-step exploit chain, vulnerable and patched Docker targets, and…
george0papasotiriou/cve-2026-4444-jwt-algorithm-confusion-via-kid-injectionPOC for CVE-2026-4444 demonstrating JWT algorithm confusion via untrusted kid injection, including vulnerable Node.js server and Python exploit for…
uziii2208/cve-2026-88899Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem
nel-droid/cve-2026-71204-pocPoC: changedetection.io settings blind-merge mass assignment (CVE-2026-71204, Medium 6.3)
0xcyp1337/cve-2026-82329Mass exploit for CVE-2026-82329, an unauthenticated authentication bypass in JFrog Artifactory. Supports single-target and batch scanning with…
nastar-id/cve-2026-18315-pocProof-of-concept for CVE-2026-18315 (TrueBooker WordPress Plugin): Unauthenticated Authorization Bypass Through User-Controlled Key to Account…
tamatahyt/cve-2026-53576Kestra Unauthenticated RCE Exploit (CVE-2026-53576)
matesz44/cve-2026-39987Exploits CVE-2026-39987 pre-auth RCE in Marimo <0.23.0 by connecting to the unauthenticated /terminal/ws WebSocket. Supports arbitrary command…
